Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/a0c444-9796-4f06-83f2-aa788a420aec/1/OXkC0V8UUnQSBguE_EOq6i-7AVw.roa
File: OXkC0V8UUnQSBguE_EOq6i-7AVw.roa (raw, json)
Hash identifier: RYTdm9xb/Agn5v4ku1WXfrlN8Cg1tfFhU39gUA45/7Q=
Subject key identifier: 39:79:02:D1:5F:14:52:74:12:06:0B:84:FC:43:AA:EA:2F:BB:01:5C
Certificate issuer: /CN=a74c6706e3fbebdff146a8a14ec2a3284a92ba62
Certificate serial: 019420681F85C9D088DFA730877AD8DA6655
Authority key identifier: A7:4C:67:06:E3:FB:EB:DF:F1:46:A8:A1:4E:C2:A3:28:4A:92:BA:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p0xnBuP769_xRqihTsKjKEqSumI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/a0c444-9796-4f06-83f2-aa788a420aec/1/OXkC0V8UUnQSBguE_EOq6i-7AVw.roa
Signing time: Wed 01 Jan 2025 05:48:02 +0000
ROA not before: Wed 01 Jan 2025 05:48:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1836
IP address blocks: 80.86.192.0/20 maxlen: 21
80.253.80.0/21 maxlen: 22
80.254.160.0/19 maxlen: 20
81.6.0.0/19 maxlen: 20
81.6.48.0/20 maxlen: 21
81.221.0.0/16 maxlen: 17
82.195.224.0/19 maxlen: 20
146.228.0.0/16 maxlen: 17
146.228.64.0/24 maxlen: 24
193.72.0.0/18 maxlen: 19
193.72.64.0/21 maxlen: 21
193.72.72.0/22 maxlen: 22
193.72.76.0/23 maxlen: 23
193.72.78.0/24 maxlen: 24
193.72.81.0/24 maxlen: 24
193.72.82.0/23 maxlen: 24
193.72.84.0/22 maxlen: 23
193.72.88.0/21 maxlen: 22
193.72.96.0/19 maxlen: 20
193.72.128.0/20 maxlen: 21
193.72.148.0/22 maxlen: 23
193.72.152.0/21 maxlen: 22
193.72.160.0/22 maxlen: 23
193.72.164.0/23 maxlen: 24
193.72.167.0/24 maxlen: 24
193.72.168.0/21 maxlen: 22
193.72.176.0/21 maxlen: 22
193.72.184.0/23 maxlen: 24
193.72.187.0/24 maxlen: 24
193.72.188.0/22 maxlen: 23
193.72.192.0/20 maxlen: 21
193.72.208.0/21 maxlen: 22
193.72.217.0/24 maxlen: 24
193.72.218.0/23 maxlen: 24
193.72.220.0/22 maxlen: 23
193.72.224.0/19 maxlen: 20
193.73.0.0/18 maxlen: 19
193.73.64.0/19 maxlen: 20
193.73.80.0/20 maxlen: 20
193.73.96.0/21 maxlen: 21
193.73.96.0/22 maxlen: 22
193.73.100.0/22 maxlen: 22
193.73.104.0/23 maxlen: 24
193.73.108.0/22 maxlen: 23
193.73.112.0/24 maxlen: 24
193.73.115.0/24 maxlen: 24
193.73.116.0/22 maxlen: 23
193.73.120.0/23 maxlen: 24
193.73.123.0/24 maxlen: 24
193.73.124.0/24 maxlen: 24
193.73.126.0/23 maxlen: 24
193.73.128.0/18 maxlen: 19
193.73.192.0/20 maxlen: 21
193.73.209.0/24 maxlen: 24
193.73.210.0/24 maxlen: 24
193.73.212.0/22 maxlen: 23
193.73.216.0/21 maxlen: 22
193.73.224.0/21 maxlen: 22
193.73.232.0/22 maxlen: 23
193.73.236.0/23 maxlen: 24
193.73.239.0/24 maxlen: 24
193.73.240.0/23 maxlen: 24
193.73.244.0/22 maxlen: 23
193.73.248.0/23 maxlen: 24
193.73.252.0/22 maxlen: 23
193.193.128.0/19 maxlen: 20
194.191.0.0/16 maxlen: 17
195.48.0.0/16 maxlen: 17
195.49.0.0/17 maxlen: 18
195.49.6.0/24 maxlen: 24
195.49.78.0/24 maxlen: 24
195.49.79.0/24 maxlen: 24
195.130.160.0/19 maxlen: 20
212.59.128.0/18 maxlen: 19
2001:1b50::/29 maxlen: 29
2a01:2a8::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/a0c444-9796-4f06-83f2-aa788a420aec/1/p0xnBuP769_xRqihTsKjKEqSumI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/a0c444-9796-4f06-83f2-aa788a420aec/1/p0xnBuP769_xRqihTsKjKEqSumI.mft
rsync://rpki.ripe.net/repository/DEFAULT/p0xnBuP769_xRqihTsKjKEqSumI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 17:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:1f:85:c9:d0:88:df:a7:30:87:7a:d8:da:66:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a74c6706e3fbebdff146a8a14ec2a3284a92ba62
Validity
Not Before: Jan 1 05:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=397902d15f14527412060b84fc43aaea2fbb015c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:6f:02:98:7b:8f:d0:42:15:ff:9a:26:cd:47:
78:de:c8:de:8f:f8:cb:4d:53:bb:09:7d:98:ec:31:
5d:22:06:a4:25:f2:b3:44:09:7d:a1:50:57:94:28:
b8:de:33:10:8b:e0:e9:67:66:5e:52:e8:9e:6a:af:
e1:25:b9:fc:45:39:60:d1:65:d9:18:bc:a2:33:ab:
de:3d:50:e1:f7:16:ad:17:bf:ca:71:5a:d5:eb:00:
15:cb:39:b6:56:03:a9:17:42:98:43:b4:f8:76:12:
58:fd:95:ea:96:f2:7a:ac:d5:c6:d6:1d:56:ba:6d:
5a:3f:d0:e7:49:2e:26:39:72:0c:29:4d:00:1a:82:
b8:1f:75:50:9c:c8:fe:b9:94:b5:7c:15:5e:7f:94:
ad:b6:65:ef:7f:32:86:26:fe:18:fd:c7:e0:55:bf:
00:cf:b8:5d:13:36:2f:f7:4b:13:3d:98:09:b8:1f:
66:e8:2e:07:7f:8a:b6:25:11:37:68:8e:88:f9:eb:
ed:56:3a:cc:82:69:3a:81:9d:08:83:3e:b5:7e:4e:
e0:4a:71:63:80:30:9f:e4:ec:60:c2:93:9d:fa:b2:
99:0b:a3:07:84:c3:4a:d0:f8:ed:9b:a6:27:25:86:
4f:34:29:33:e3:cf:6d:45:87:f9:d2:e5:95:c9:1b:
02:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:79:02:D1:5F:14:52:74:12:06:0B:84:FC:43:AA:EA:2F:BB:01:5C
X509v3 Authority Key Identifier:
keyid:A7:4C:67:06:E3:FB:EB:DF:F1:46:A8:A1:4E:C2:A3:28:4A:92:BA:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p0xnBuP769_xRqihTsKjKEqSumI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a0c444-9796-4f06-83f2-aa788a420aec/1/OXkC0V8UUnQSBguE_EOq6i-7AVw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a0c444-9796-4f06-83f2-aa788a420aec/1/p0xnBuP769_xRqihTsKjKEqSumI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.86.192.0/20
80.253.80.0/21
80.254.160.0/19
81.6.0.0/19
81.6.48.0/20
81.221.0.0/16
82.195.224.0/19
146.228.0.0/16
193.72.0.0-193.72.78.255
193.72.81.0-193.72.143.255
193.72.148.0-193.72.165.255
193.72.167.0-193.72.185.255
193.72.187.0-193.72.215.255
193.72.217.0-193.73.105.255
193.73.108.0-193.73.112.255
193.73.115.0-193.73.121.255
193.73.123.0-193.73.124.255
193.73.126.0-193.73.207.255
193.73.209.0-193.73.210.255
193.73.212.0-193.73.237.255
193.73.239.0-193.73.241.255
193.73.244.0-193.73.249.255
193.73.252.0/22
193.193.128.0/19
194.191.0.0/16
195.48.0.0-195.49.127.255
195.130.160.0/19
212.59.128.0/18
IPv6:
2001:1b50::/29
2a01:2a8::/29
Signature Algorithm: sha256WithRSAEncryption
8c:b3:c7:45:5a:dd:1a:99:ed:ac:3e:26:73:eb:bc:83:87:a5:
87:3c:82:7d:da:55:04:28:9a:9a:14:41:48:c9:a7:f5:a3:ae:
b7:0b:91:bc:63:b9:2f:a7:06:ec:f8:67:0e:68:92:b4:c6:08:
78:e5:0d:64:03:55:f9:90:c4:f1:53:56:86:b4:a5:8d:9c:31:
5a:e5:fd:1a:f1:ee:6d:76:b2:3f:e9:a7:38:72:0a:a0:1d:30:
7f:ca:8c:e1:85:cf:c4:64:4f:7c:2c:52:2e:d2:3b:88:86:7b:
11:86:7d:8e:dd:89:95:10:1a:1a:d4:41:40:b9:da:b0:07:46:
e6:9e:9d:41:95:a5:1f:38:bc:e0:16:ed:9c:9b:4b:97:ee:9a:
08:04:0e:61:9f:c9:06:a5:79:dc:76:b5:dd:ed:e2:6f:6a:f5:
43:23:ef:7b:e9:e6:36:bc:a7:1a:db:03:66:af:72:51:86:bc:
a7:cf:1c:cd:3f:6d:13:28:7e:29:68:d1:29:a4:f7:e4:35:47:
ff:17:90:8b:9e:34:c8:b3:31:00:d6:b6:c6:14:28:6e:a7:ec:
dc:e4:48:14:1e:20:5b:a3:50:3e:05:45:ca:d1:4a:7f:3c:18:
20:90:1a:d5:25:6e:f0:93:17:25:79:11:ac:f0:82:43:ab:78:
4e:64:2e:ce
-----BEGIN CERTIFICATE-----
MIIGMjCCBRqgAwIBAgISAZQgaB+FydCI36cwh3rY2mZVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3NGM2NzA2ZTNmYmViZGZmMTQ2YThhMTRlYzJhMzI4NGE5
MmJhNjIwHhcNMjUwMTAxMDU0ODAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzOTc5MDJkMTVmMTQ1Mjc0MTIwNjBiODRmYzQzYWFlYTJmYmIwMTVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAum8CmHuP0EIV/5omzUd43sjej/jL
TVO7CX2Y7DFdIgakJfKzRAl9oVBXlCi43jMQi+DpZ2ZeUuieaq/hJbn8RTlg0WXZ
GLyiM6vePVDh9xatF7/KcVrV6wAVyzm2VgOpF0KYQ7T4dhJY/ZXqlvJ6rNXG1h1W
um1aP9DnSS4mOXIMKU0AGoK4H3VQnMj+uZS1fBVef5SttmXvfzKGJv4Y/cfgVb8A
z7hdEzYv90sTPZgJuB9m6C4Hf4q2JRE3aI6I+evtVjrMgmk6gZ0Igz61fk7gSnFj
gDCf5OxgwpOd+rKZC6MHhMNK0Pjtm6YnJYZPNCkz489tRYf50uWVyRsC+QIDAQAB
o4IDPjCCAzowHQYDVR0OBBYEFDl5AtFfFFJ0EgYLhPxDquovuwFcMB8GA1UdIwQY
MBaAFKdMZwbj++vf8UaooU7CoyhKkrpiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcDB4bkJ1UDc2OV94UnFpaFRzS2pLRXFTdW1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9hMGM0NDQtOTc5Ni00ZjA2LTgzZjIt
YWE3ODhhNDIwYWVjLzEvT1hrQzBWOFVVblFTQmd1RV9FT3E2aS03QVZ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi9hMGM0NDQtOTc5Ni00ZjA2LTgzZjItYWE3ODhhNDIwYWVj
LzEvcDB4bkJ1UDc2OV94UnFpaFRzS2pLRXFTdW1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBUgYIKwYBBQUHAQcBAf8EggFBMIIBPTCCASMEAgABMIIB
GwMEBFBWwAMEA1D9UAMEBVD+oAMEBVEGAAMEBFEGMAMDAFHdAwQFUsPgAwMAkuQw
CwMDA8FIAwQAwUhOMAwDBADBSFEDBATBSIAwDAMEAsFIlAMEAcFIpDAMAwQAwUin
AwQBwUi4MAwDBADBSLsDBAPBSNAwDAMEAMFI2QMEAcFJaDAMAwQCwUlsAwQAwUlw
MAwDBADBSXMDBAHBSXgwDAMEAMFJewMEAMFJfDAMAwQBwUl+AwQEwUnAMAwDBADB
SdEDBADBSdIwDAMEAsFJ1AMEAcFJ7DAMAwQAwUnvAwQBwUnwMAwDBALBSfQDBAHB
SfgDBALBSfwDBAXBwYADAwDCvzALAwMEwzADBAfDMQADBAXDgqADBAbUO4AwFAQC
AAIwDgMFAyABG1ADBQMqAQKoMA0GCSqGSIb3DQEBCwUAA4IBAQCMs8dFWt0ame2s
PiZz67yDh6WHPIJ92lUEKJqaFEFIyaf1o663C5G8Y7kvpwbs+GcOaJK0xgh45Q1k
A1X5kMTxU1aGtKWNnDFa5f0a8e5tdrI/6ac4cgqgHTB/yozhhc/EZE98LFIu0juI
hnsRhn2O3YmVEBoa1EFAudqwB0bmnp1BlaUfOLzgFu2cm0uX7poIBA5hn8kGpXnc
drXd7eJvavVDI+976eY2vKca2wNmr3JRhrynzxzNP20TKH4paNEppPfkNUf/F5CL
njTIszEA1rbGFChup+zc5EgUHiBbo1A+BUXK0Up/PBggkBrVJW7wkxcleRGs8IJD
q3hOZC7O
-----END CERTIFICATE-----
Generated at Thu Feb 20 03:14:38 2025 by rpki-client